<iframe id="iframe" src="/set-header?Content-Security-Policy%3A%20frame-ancestors%20*">
